Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241431 4.3 警告 Sourcefabric - Newscoop の admin/login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4679 2012-08-29 15:55 2012-04-5 Show GitHub Exploit DB Packet Storm
241432 4.3 警告 Sourcefabric - Newscoop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1935 2012-08-29 15:54 2012-04-5 Show GitHub Exploit DB Packet Storm
241433 7.5 危険 Sourcefabric - Newscoop の admin/country/edit.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1934 2012-08-29 15:53 2012-04-5 Show GitHub Exploit DB Packet Storm
241434 6.8 警告 Sourcefabric - Newscoop における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1933 2012-08-29 15:52 2012-04-5 Show GitHub Exploit DB Packet Storm
241435 4.4 警告 Google - Tunnelblick における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4677 2012-08-29 11:53 2012-08-26 Show GitHub Exploit DB Packet Storm
241436 1.2 注意 Google - Tunnelblick の errorExitIfAttackViaString 関数における任意のファイルを削除される脆弱性 CWE-59
リンク解釈の問題 		CVE-2012-4676 2012-08-29 11:51 2012-08-26 Show GitHub Exploit DB Packet Storm
241437 1.2 注意 Google - Tunnelblick における予期せぬプロセスを停止される脆弱性 CWE-362
競合状態 		CVE-2012-3487 2012-08-29 11:50 2012-08-26 Show GitHub Exploit DB Packet Storm
241438 6.9 警告 Google - Tunnelblick における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3486 2012-08-29 11:49 2012-08-26 Show GitHub Exploit DB Packet Storm
241439 7.2 危険 Google - Tunnelblick における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3485 2012-08-29 11:48 2012-08-26 Show GitHub Exploit DB Packet Storm
241440 7.2 危険 Google - Tunnelblick におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3484 2012-08-29 11:47 2012-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269321 8.0 HIGH
Network 		microfocus arcsight_enterprise_security_manager HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download… NVD-CWE-noinfo
CVE-2016-1991 2024-11-21 11:47 2016-03-16 Show GitHub Exploit DB Packet Storm
269322 7.8 HIGH
Local 		microfocus arcsight_enterprise_security_manager HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspeci… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1990 2024-11-21 11:47 2016-03-16 Show GitHub Exploit DB Packet Storm
269323 9.8 CRITICAL
Network 		hp network_automation HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a different vulnerabili… NVD-CWE-noinfo
CVE-2016-1989 2024-11-21 11:47 2016-03-15 Show GitHub Exploit DB Packet Storm
269324 9.8 CRITICAL
Network 		hp network_automation HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a different vulnerabili… NVD-CWE-noinfo
CVE-2016-1988 2024-11-21 11:47 2016-03-15 Show GitHub Exploit DB Packet Storm
269325 8.8 HIGH
Network 		mozilla firefox
network_security_services 		Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote a… NVD-CWE-Other
CVE-2016-1979 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
269326 7.3 HIGH
Network 		mozilla firefox
network_security_services 		Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers t… NVD-CWE-Other
CVE-2016-1978 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
269327 8.8 HIGH
Network 		suse
opensuse
oracle
sil
mozilla 		linux_enterprise
leap
opensuse
linux
graphite2
firefox 		The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrar… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1977 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
269328 5.5 MEDIUM
Network 		mozilla
webrtc_project 		firefox
webrtc 		Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service or poss… NVD-CWE-Other
CVE-2016-1976 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
269329 6.3 MEDIUM
Network 		webrtc_project
mozilla 		webrtc
firefox 		Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service … CWE-362
Race Condition 		CVE-2016-1975 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm
269330 8.8 HIGH
Network 		mozilla
oracle
suse
opensuse 		firefox
thunderbird
linux
linux_enterprise
leap
opensuse 		The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1974 2024-11-21 11:47 2016-03-14 Show GitHub Exploit DB Packet Storm